CVE-2017-17877 - CVE House
Back to Database
Status published Critical CVE-2017-17877

An issue was discovered in Valve Steam Link build 643....

Vulnerability Description

An issue was discovered in Valve Steam Link build 643. When the SSH daemon is enabled for local development, the device is publicly available via IPv6 TCP port 22 over the internet (with stateless address autoconfiguration) by default, which makes it easier for remote attackers to obtain access by guessing 24 bits of the MAC address and attempting a root login. This can be exploited in conjunction with CVE-2017-17878.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-17877

Credits & Attribution

No credits recorded in the NVD database.

References

More from valvesoftware

View All →
CVE-2021-30481
Valve Steam before 2021-04-17, when a Source engine game is...
High 8
CVE-2020-9005
meshsystem.dll in Valve Dota 2 through 2020-02-17 allows remote attackers...
High 7.8
CVE-2020-7952
rendersystemdx9.dll in Valve Dota 2 before 7.23f allows remote attackers...
High 7.8
CVE-2020-7951
meshsystem.dll in Valve Dota 2 before 7.23e allows remote attackers...
High 7.8
CVE-2020-7950
meshsystem.dll in Valve Dota 2 before 7.23f allows remote attackers...
High 7.8

Affected Vendor

valvesoftware

View all reports →

Affected Software

steam link firmware
Vulnerable Versions:
0

Timeline

Official Publish: December 24th, 2017
Last Modified: September 16th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.